Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft
File: r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft (raw, json)
Hash identifier: opwHMpeE5DSgcpTtPRpUYSShLViGifm8XeFYtLdgGso=
Subject key identifier: 10:FC:A1:70:EF:19:D2:2F:B1:9A:44:48:69:A6:D0:2D:8D:80:43:58
Authority key identifier: AF:84:E3:D2:3F:F6:0B:82:9E:14:6E:BD:AB:4A:0A:E6:1D:E0:F4:FB
Certificate issuer: /CN=af84e3d23ff60b829e146ebdab4a0ae61de0f4fb
Certificate serial: 019921B1A1C4FF5C5E5226E60EF0228705A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft
Manifest number: 0111
Signing time: Sun 07 Sep 2025 01:01:53 +0000
Manifest this update: Sun 07 Sep 2025 01:01:53 +0000
Manifest next update: Mon 08 Sep 2025 01:01:53 +0000
Files and hashes: 1: Sj_-Ptmp5l-zNzTgHXDKWr6DNsQ.roa (hash: S/l02EQhWoa3TBsVB+OnLc92uLdAeVgn7Z4178pnmT4=)
2: r4Tj0j_2C4KeFG69q0oK5h3g9Ps.crl (hash: BcObYBukaZIarQz0Up4o/zb9KPFoAlhOaemGWPKXfdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:a1:c4:ff:5c:5e:52:26:e6:0e:f0:22:87:05:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af84e3d23ff60b829e146ebdab4a0ae61de0f4fb
Validity
Not Before: Sep 7 01:01:53 2025 GMT
Not After : Sep 8 01:01:53 2025 GMT
Subject: CN=10fca170ef19d22fb19a444869a6d02d8d804358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ec:f4:e6:0d:61:b1:ee:0c:98:d0:76:8a:bb:
67:6c:ba:aa:7d:3e:8a:4e:5e:d6:3e:bd:a3:f8:93:
31:bf:92:e3:21:bb:fb:11:9c:df:c6:45:d7:e5:5d:
2b:b1:18:3c:78:85:ab:ac:ff:da:b9:43:f8:72:75:
04:76:48:03:91:5e:98:82:0e:0f:85:97:71:c3:c2:
31:e4:3c:5d:dc:14:7d:22:23:11:6d:93:c5:69:c2:
33:88:fd:92:67:67:a0:ed:a1:18:88:3e:3e:e0:02:
5d:d6:f8:86:a3:06:cb:34:45:37:f1:7c:a5:e6:23:
87:35:2c:20:89:a3:f8:1d:77:39:58:ec:a9:3c:94:
f4:9c:fb:06:35:5b:23:df:0a:92:87:49:3f:fb:36:
23:35:2e:5e:51:f7:b9:76:8e:de:18:a5:eb:0c:2a:
6c:58:18:67:14:a9:b8:79:e9:81:98:59:d4:e2:88:
10:0e:e9:21:f0:af:bf:b8:a1:12:5b:e2:10:59:fd:
0c:f6:a6:fc:2e:f4:ee:0d:5a:a6:be:7b:01:69:f7:
ec:1a:7c:97:7c:a6:67:73:8b:9b:52:e7:8c:54:85:
7d:09:7e:58:02:c2:af:33:54:8a:86:ab:50:70:df:
00:f9:27:16:e1:87:8c:f7:61:d8:c6:b0:94:d5:cb:
61:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:FC:A1:70:EF:19:D2:2F:B1:9A:44:48:69:A6:D0:2D:8D:80:43:58
X509v3 Authority Key Identifier:
keyid:AF:84:E3:D2:3F:F6:0B:82:9E:14:6E:BD:AB:4A:0A:E6:1D:E0:F4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:e0:90:21:60:f1:af:55:bd:3c:89:d1:d0:2e:3a:7e:2a:a7:
ff:f3:c3:bf:aa:6c:d7:53:0a:29:45:27:39:45:57:62:a5:06:
08:07:15:bf:3e:f3:e0:e5:0b:a7:2a:3b:4a:13:cd:41:11:29:
21:13:4f:51:fc:06:45:af:e9:d5:40:fa:0d:76:12:f8:10:30:
6c:42:b3:5a:04:57:fa:ba:ce:70:c5:0a:4a:52:bd:a4:91:b9:
7b:97:43:8e:50:97:28:d8:64:ae:b2:86:dc:b6:1e:d7:61:08:
31:a0:d2:cd:88:73:1d:cc:d8:ef:13:c6:09:5d:fc:fd:77:3e:
4b:e9:19:9f:28:b9:bf:09:3f:b3:d0:56:ce:e4:bf:b1:3f:7e:
b1:90:fd:34:33:d1:8a:9e:7b:58:30:ee:cb:81:46:c6:4f:8a:
40:45:9e:3e:63:46:f4:2f:60:01:ca:83:5a:2d:28:f7:98:5d:
ad:73:42:02:08:7a:42:50:fe:00:93:32:7c:ef:09:28:22:b3:
80:bd:87:9b:5a:bd:f9:64:cf:d4:ff:53:fc:e5:e7:66:34:7f:
34:04:13:02:26:e0:82:5d:5f:1c:ce:2a:cc:48:2c:bc:b1:39:
8c:6e:2a:11:4e:b1:b3:07:f2:09:84:b2:c9:73:f8:10:ab:d5:
3f:e4:fd:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:22 2025 by rpki-client